Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa
File: 3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: KxAm/heLizOinOonY4Wrfmh8HzqmdkuB/pMunaxsg54=
Subject key identifier: 56:99:46:E7:35:7A:F0:72:A9:22:EF:61:99:0C:F2:8A:F1:1F:73:E1
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 05D9A13A1E20BEF106EE7CC0F86EDDA9B2A6CC7F
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:17 +0000
ROA not before: Mon 27 Mar 2023 08:22:17 +0000
ROA not after: Mon 25 Mar 2024 08:27:17 +0000
asID: 51167
IP address blocks: 185.182.186.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d9:a1:3a:1e:20:be:f1:06:ee:7c:c0:f8:6e:dd:a9:b2:a6:cc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:17 2023 GMT
Not After : Mar 25 08:27:17 2024 GMT
Subject: CN=569946E7357AF072A922EF61990CF28AF11F73E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:e9:cc:e2:cc:29:ad:a8:f4:00:b3:94:37:
86:31:77:ad:4d:8f:69:9a:59:18:dc:ae:39:1f:75:
9d:a6:a0:32:08:35:81:00:bc:48:8c:64:d9:d3:ba:
ef:1f:b6:e7:71:3b:95:45:0f:5d:94:d1:c7:2e:5c:
4d:82:47:77:8a:f1:95:dc:1a:09:10:2a:c9:07:f5:
e1:54:a4:7e:24:99:0e:17:30:71:9a:47:72:6d:96:
47:d4:9e:a6:5f:e1:3e:5f:d1:33:37:40:38:08:b7:
31:cc:90:22:5f:4c:9b:cb:9c:a9:0b:3d:82:72:f4:
f2:e2:ed:55:e3:c7:c0:ab:f4:d0:21:31:63:d8:38:
d0:d1:84:de:db:51:44:b1:8b:e5:48:90:04:b7:50:
b1:eb:45:a2:01:0c:9e:55:76:e7:b9:0a:17:ea:5a:
88:8d:2b:14:29:d5:e5:3d:2a:5e:a6:ca:91:44:dc:
66:22:40:4a:f4:05:e6:66:17:52:bd:dc:97:ce:0f:
61:f9:b4:6b:61:98:fd:26:93:96:1a:f2:a2:7c:4d:
dd:99:1a:2e:4e:4e:40:24:62:bf:74:01:c3:c2:a6:
e6:87:5b:8e:cb:3d:8d:6b:cf:07:ac:d6:69:d3:22:
cd:54:03:67:d3:98:29:27:64:f3:c3:af:ef:b0:10:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:99:46:E7:35:7A:F0:72:A9:22:EF:61:99:0C:F2:8A:F1:1F:73:E1
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.186.0/23
Signature Algorithm: sha256WithRSAEncryption
68:d9:50:a1:74:91:c6:0e:f9:c8:88:03:b3:e4:8a:57:54:60:
5f:f5:47:67:89:e7:94:1e:97:5b:f1:a7:f6:50:5e:7e:b5:d6:
db:c0:4e:d3:92:ba:a9:eb:75:dc:fc:12:2b:5f:99:55:f5:2b:
95:8a:88:80:d7:e0:dc:9f:50:cf:94:3d:b4:16:6d:89:49:50:
f8:38:71:d5:77:7e:53:bd:74:c7:3f:e7:d6:2a:5a:91:e3:71:
4a:00:9d:42:24:a7:81:39:87:3f:dd:5e:6e:b4:8d:f7:f2:9c:
69:26:86:bd:e4:f2:f5:4b:bd:e6:ee:57:04:fe:c8:a0:2a:fc:
ce:14:b7:7b:0b:9e:94:aa:8a:d5:43:66:94:aa:d9:71:45:b9:
c7:a7:e4:89:2f:64:88:6d:b0:bb:f9:b3:62:00:37:37:9c:0a:
10:94:10:37:4d:7b:81:2e:80:ce:c4:c3:f8:af:57:47:87:7d:
4b:40:ba:19:68:87:cd:65:9f:7e:e4:26:63:90:05:ed:cd:a3:
26:36:e1:75:ac:2d:6d:74:bb:f2:c7:9c:89:79:33:74:53:6a:
6c:c9:2d:0f:07:b5:11:48:f6:8b:64:71:7a:4e:50:64:b0:b1:
72:de:be:cd:8e:ce:51:ed:4f:42:cc:a6:db:cc:e0:bb:a8:33:
2b:45:d8:ad
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUBdmhOh4gvvEG7nzA+G7dqbKmzH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTdaFw0yNDAzMjUwODI3MTdaMDMxMTAvBgNV
BAMTKDU2OTk0NkU3MzU3QUYwNzJBOTIyRUY2MTk5MENGMjhBRjExRjczRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgk+nM4swpraj0ALOUN4Yxd61N
j2maWRjcrjkfdZ2moDIINYEAvEiMZNnTuu8ftudxO5VFD12U0ccuXE2CR3eK8ZXc
GgkQKskH9eFUpH4kmQ4XMHGaR3JtlkfUnqZf4T5f0TM3QDgItzHMkCJfTJvLnKkL
PYJy9PLi7VXjx8Cr9NAhMWPYONDRhN7bUUSxi+VIkAS3ULHrRaIBDJ5Vdue5Chfq
WoiNKxQp1eU9Kl6mypFE3GYiQEr0BeZmF1K93JfOD2H5tGthmP0mk5Ya8qJ8Td2Z
Gi5OTkAkYr90AcPCpuaHW47LPY1rzwes1mnTIs1UA2fTmCknZPPDr++wEASjAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUVplG5zV68HKpIu9hmQzyivEfc+EwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMTM4MzIyZTMx
MzgzNjJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5trowDQYJKoZIhvcNAQELBQADggEBAGjZUKF0kcYO+ciIA7PkildUYF/1R2eJ
55Qel1vxp/ZQXn611tvATtOSuqnrddz8EitfmVX1K5WKiIDX4NyfUM+UPbQWbYlJ
UPg4cdV3flO9dMc/59YqWpHjcUoAnUIkp4E5hz/dXm60jffynGkmhr3k8vVLvebu
VwT+yKAq/M4Ut3sLnpSqitVDZpSq2XFFucen5IkvZIhtsLv5s2IANzecChCUEDdN
e4EugM7Ew/ivV0eHfUtAuhloh81ln37kJmOQBe3NoyY24XWsLW10u/LHnIl5M3RT
amzJLQ8HtRFI9otkcXpOUGSwsXLevs2OzlHtT0LMptvM4LuoMytF2K0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org